{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "pdfbox-0.2.0.29-2.oe2403sp3.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-18T17:55:21.152456217Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/pdfbox-0.2.0.29-2.oe2403sp3.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-pdfbox-2.0.29",
      "name": "pdfbox",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "9e04233f9b76afc95ed4f02eb8fd89552cc00d77b6ba7640d260f2510dfd7f33"
        }
      ],
      "description": "Apache PDFBox is an open source Java PDF library for working with PDF\ndocuments. This project allows creation of new PDF documents, manipulation of\nexisting documents and the ability to extract content from documents. Apache\nPDFBox also includes several command line utilities. Apache PDFBox is\npublished under the Apache License v2.0.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/pdfbox@2.0.29-2.oe2403sp3?arch=noarch&epoch=0&upstream=pdfbox-2.0.29-2.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.pdfbox/pdfbox@2.0.29",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://pdfbox.apache.org/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/658e3a778649334e89105f1732157a2b6fdf84ad18fab078ee4b7e9504de9740-primary.sqlite.bz2",
      "summary": "A Java PDF Library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.0.29-2.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-fontbox-2.0.29",
      "name": "fontbox",
      "licenseConcluded": "ASL 2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2d179024aee0174d08562a328d2121e517c8a57de3ef745a10bce270bafed1f9"
        }
      ],
      "description": "FontBox is a Java library used to obtain low level information from font\nfiles. FontBox is a subproject of Apache PDFBox.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/fontbox@2.0.29-2.oe2403sp3?arch=noarch&epoch=0&upstream=pdfbox-2.0.29-2.oe2403sp3.src.rpm",
          "referenceType": "purl"
        },
        {
          "referenceCategory": "PROVIDE_MANAGER",
          "referenceLocator": "pkg:maven/org.apache.pdfbox/fontbox@2.0.29",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://pdfbox.apache.org/",
      "licenseDeclared": "ASL 2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/658e3a778649334e89105f1732157a2b6fdf84ad18fab078ee4b7e9504de9740-primary.sqlite.bz2",
      "summary": "Apache FontBox",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.0.29-2.oe2403sp3"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-pdfbox-2.0.29",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-fontbox-2.0.29"
    }
  ]
}